Technology Alliance Partner I Solution Brief

Advanced Threat Protection Solution Delivering Eective and Scalable Cyber Security
Net Optics and Light Cyber The Challenge
The last couple of years demonstrated that traditional perimeter and endpoint security solutions are not effective against targeted attacks. Once a persistent attacker crosses the perimeter, he can operate freely inside the internal network. It is therefore essential to monitor internal network traffic at a large scale and automatically analyze it to detect the attackers malicious behavior. Vital to this strategy is maintaining the scalability, availability, performance, and value of these monitoring solutions. Solution Highlights Comprehensive detection of targeted attacks without the use of signatures or rules Detection of malicious behavior as well as malware, both known and unknown Easily install and scale deployments as needs grow while lowering TCO Gain advanced threat protection without compromising network reliability Focuses the incident response team on the high priority threats Targeted Forensics combines network and host indicators to enable effective investigation and remediation

The Solution
Light Cyber and Net Optics have partnered to provide a scalable and faulttolerant solution, which consists of the Light Cyber Magna working with Net Optics Tap solutions and xBalancer. Net Optics iTap 2 Port Aggregator copies traffic from one network link to one or two monitoring tools. It supports network-monitoring through an easyto-use Web UI, detailed counter statistics, SNMP traps, and field upgradable software. If traffic levels exceed the capacity of the receiving NIC, the Port Aggregator stores overflow traffic into buffer memory; if traffic exceeds 100% bandwidth of the monitoring device, the device can function like a standard tap with half duplex monitoringand then be set back to resume full duplex aggregation mode. Numerous features including Role Based User Access (RBAC), 1024bit SSL encryption (for HTTPS and SSHv2), IP Access List, and SNMPv2 / SNMPv3. The Net Optics xBalancer is built specifically to prevent tool overburdening by distributing the traffic to multiple monitoring tools. Thus xBalancer allows customers to scale their deployments as the need grows while maintaining security. Tool health is monitored using Heartbeat packets and can proactively redirect traffic to available or spare tools in case of failure. Light Cyber Magna detects malicious behavior of targeted attackers inside the organizations network. Automated analysis profiles the normal behavior of network users and hosts to spot malicious activity at an early stage of an attack. Targeted Forensics provides the incident response team with the information they need to effectively investigate and remediate the attack.

Technology Alliance Partner I Solution Brief

Advanced Threat Protection Solution Delivering Effective and Scalable Cyber Security

Magna automates a
Router Switch

three-step methodology Profile - MAGNA seamlessly profiles normal behavior of all network users and endpoints enterprise-wide, passively analyzing network traffic with zero-configuration and without any rules or signatures.
Console

2 1 B A
www.netoptics.com

2 1 B A
LINK

BYPASS ON OFF

Network

Monitor

A
OUT IN

B
OUT IN

1
OU T IN

2
OU T IN

10 GigaBit

2 1
RESET

Net Optics iTap

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

Management

Net Optics xBalancer

Detect - MAGNA automatically detects malicious behavior inside the organizational network at the early stages of an attack and alerts the SOC Investigate - MAGNA uses Targeted Forensics at the network and host level, to provide the incident response team with the information they need to quickly understand the nature and severity of the threat and to effectively investigate and remediate the attack.

Light Cyber Magna

Light Cyber Magna

The diagram shows two network ports on the Net Optics iTap connected to the upstream and downstream network devices, the aggregation ports connecting to the xBalancer. The Light Cyber appliances connect to the xBalancer, which provides session based load balancing. The xBalancer in turn uses a unique heartbeat for each Light Cyber monitoring link. In case of a heartbeat failure the xBalancer rebalances the traffic to the remaining tools or to an additional spare to maintain continuous monitoring.

Net Optics
Net Optics is the leading provider of Total Application and Network Visibility solutions that deliver real-time network intelligence for peak performance in network monitoring and security. As a result, businesses achieve the scalable end-to-end visibility they need to optimize network performance of physical, virtual and private cloud environments, and remote branch offices. More than 7,500 enterprises, service providers and government organizationsincluding 85 percent of the Fortune 100trust Net Optics comprehensive plug and play family of application-aware NPM, Network Packet Broker, Virtual/ Cloud and Visibility Management System (VMS) solutions to deliver immediate results and quick time to value through an easy-to-use interface. Net Optics maintains a global presence through leading OEM partner and reseller networks.

Light Cyber
Light Cyber is a leading provider of Advanced Threat Protection solutions that automatically detect malicious behavior of targeted attacks and unknown malware inside the organizations network. Their solutions allow the security operation center (SOC) to focus on remediating actionable incidents at an early stage of the attack, rather than manually searching through large volumes of data to discover cyber threats. Founded in 2011 by leading cyber security experts, Light Cyber serves customers in industries from finance and telecom to media and technology.

5303 Betsy Ross Drive Santa Clara, CA 95054, United States Main: +1 (408) 737-7777 www.netoptics.com

101 Hudson Street, Jersey City New Jersey 07302, United States Main: +1 (201) 984 1969 www.lightcyber.com

Net Optics is a registered trademark of Net Optics, an Ixia company. Copyright 1996-2013 Net Optics, an Ixia company . All rights reserved. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged. Light Cyber and the Light Cyber logo are trademarks or registered trademarks of Light Cyber, Inc. in the United States and other countries.